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DETAILED ACTION 
Preliminary Amendment 

1 . The preliminary amendment filed on August 17, 2000 has been received and 
entered. 

Specification 

2. The amendment submitted on May 1 5, 2003 was entered in part. Only the 
amendment to the claims was entered. The amendment to the specification as recited 
in the amendment (p. 13) was not entered because the page and line number of the 
phrases provided in the instructions does not correspond to the specification in the 
application; the examiner was unable to locate the phrases in the specification using the 
instructions recited in the amendment. 

3. The amendment filed May 15, 2003 is objected to under 35 U.S.C. 1 32 because 
it introduces new matter into the disclosure. 35 U.S.C. 132 states that no amendment 
shall introduce new matter into the disclosure of the invention. The added material 
which is not supported by the original disclosure is as follows: "transmit said derived 
event to one of a plurality of operator workstations via said event notification service, 
regardless of a significance of said derived event" as recited in claims 1 , 16, 18, 32, and 
33, and "transmitting said parsed event to said network management service, 
regardless of a significance of said parsed event" as recited in claim 28. 

Applicant is required to cancel the new matter in the reply to this Office Action. 

Claim Rejections - 35 USC §112 

4. The following is a quotation of the first paragraph of 35 U.S.C. 112: 
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The specification shall contain a written description of the invention, and of the manner and process of 
making and using it, in such full, clear, concise, and exact terms as to enable any person skilled in the 
art to which it pertains, or with which it is most nearly connected, to make and use the same and shall 
set forth the best mode contemplated by the inventor of carrying out his invention. 

The specification is objected to under 35 U.S.C. 112, first paragraph, as failing to 
adequately teach the claimed limitations "transmit said derived event to one of a 
plurality of operator workstations via said event notification service, regardless of a 
significance of said derived event" as recited in claims 1 t 16, 18, 32, and 33, and 
"transmitting said parsed event to said network management service, regardless of a 
significance of said parsed event" as recited in claim 28. 

As to transmitting a derived and parsed event, regardless of a significance of the 
event, there does not appear to be any detailed description or disclosure of transmitting 
events regardless of a significance of the event. 

5. Claims 1 - 33 are rejected under 35 U.S.C. 112, first paragraph, as failing to 
comply with the written description requirement. The claim(s) contains subject matter 
which was not described in the specification in such a way as to reasonably convey to 
one skilled in the relevant art that the inventor(s), at the time the application was filed, 
had possession of the claimed invention. 

Applicant recites the limitations "transmit said derived event to one of a plurality 
of operator workstations via said event notification service, regardless of a significance 
of said derived event" as recited in claims 1, 16, 18, 32, and 33, and "transmitting said 
parsed event to said network management service, regardless of a significance of said 
parsed event" as recited in claim 28. There does not appear to be a written description 
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of the claimed limitation in the application as filed, for the reasons set forth in the 
objection to the specification. 

Claim Rejections - 35 USC § 102 

6. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

7. Claims 16, 17, and 32 are rejected under 35 U.S.C. 102(b) as being anticipated 
by U.S. Patent No. 5,761,502 to Jacobs. 

As to claim 16, Jacobs teaches (column 2, lines 36 - 46; column 5, lines 55 - 65; 
column 7, line 39 - column 8, line 2; column 9, lines 38 - 63) correlating network event 
messages on a computer network (correlating network events across many different 
network domains) comprising a message parsing service (network event parser 314, 
Fig. 3), an event correlation service (expert system 326, Fig. 3), and a knowledge 
database (Network Topology Object Database 318, Fig. 3), the method comprising the 
steps of: 

receiving a raw event at the message parsing service (events are collected from 
Network 202 and input to a Network Event Parser 314, Fig. 3); 

parsing the raw event by the message parsing service (Network Event Parser 
314 parses and formats the data, Fig. 3); 

transmitting the parsed event to the event correlation service (Expert System 
326), utilizing data stored in the knowledge database (Network Topology Object 
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Database 318) to derive an event from the parsed event (Expert System 326 reads 
state changes from Network Topology Object Database 318... Expert System 326 
applies appropriate rules that correlate various events and infer possible root causes of 
events to produce an assessment of the events. ..the assessment... is provided to 
Presentation Manager 216, Fig. 3); and 

transmitting the derived event to one of a plurality of operator workstations 
(Presentation Manager 216 receives data from Expert System 326... these data 
represent updated states of Network 202, network events, network performance, 
correlation of events, inferred causes of events, impacts of events, and recommended 
actions... Presentation Manager 216 provides the formatted data to Network 
Management Workstation 220, Fig. 3). Jacobs also teaches transmitting the derived 
event regardless of a significance of the derived event (changes in states of all related 
network elements are correlated and reported to the user via a table of correlations; 
column 9, lines 30 - 38, also see the response below). 

As to claim 32, this is an apparatus claim that corresponds to method claim 16; 
note the rejection to claim 16 above, which also meets this apparatus claim. 

As to claim 17, Jacobs teaches (column 9, lines 38 - 62) transmitting the derived 
event from the event correlation service to a network management service and 
transmitting the derived event from the network management service to one of a 
plurality of operator workstations (Presentation Manager 216 receives data from Expert 
System 326... Presentation Manager 216 provides the formatted data to Network 
Management Workstation 220, Fig. 3). 
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Claim Rejections - 35 USC § 103 



8. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

9. Claims 1 - 7, 18, 19, 22, 25, 28, 29, and 33 are rejected under 35 U.S.C. 103(a) 
as being unpatentable over Jacobs in view of U.S. Patent No. 5,721 ,825 to Lawson. 

As to claim 28, Jacobs teaches (column 2, lines 36 - 46; column 5, lines 55 - 65; 
column 7, line 39 - column 8, line 2; column 9, lines 38 - 63) correlating network event 
messages on a computer network (correlating network events across many different 
network domains) comprising a message parsing service (network event parser 314, 
Fig. 3), an event notification service (state management), and a network management 
service (Network Management Workstation 220, Fig. 3) the method comprising the 
steps of: 

receiving a raw event from an external computer network (such events include 
Network Alarms 306 and Network Outage Information 308... this information is collected 
from Network 202, Fig. 3); 

transmitting the raw event to the message parsing service (events are collected 
from Network 202 and input to a Network Event Parser 314, Fig. 3); 

parsing the raw event by the message parsing service (Network Event Parser 
314 parses and formats the data, Fig. 3); 
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transmitting the parsed event to the network management service (Presentation 
Manager 216 receives data from Expert System 326... Presentation Manager 216 
provides the formatted data to Network Management Workstation 220, Fig. 3). As to 
transmitting the parsed event regardless of a significance of the parsed event, see the 
rejection to claim 16 above. Jacobs teaches correlating network events across many 
different network domains but does not specify a network mediation service. 

However, Lawson teaches (column 4, lines 23 - 32; column 1 1 , lines 37 - 56) 
globalizing event notifications in a distributed computing environment that includes 
network mediation service (network connection 52 represents an example of the 
networking means for interconnect servers, Fig. 3). 

Since, both Jacobs and Lawson teaches event distribution across a network, it 
would have been obvious the invention of Jacobs would also include network mediation 
service in order for the network elements to communicate across different network 
domains. 

As to claim 18, this is a combination of claim 28 with additional limitations; please 
see the rejection to claim 28 above. As to the additional limitations, Jacobs teaches 
(column 2, lines 36 - 46; column 5, lines 55 - 65; column 7, line 39 - column 8, line 2; 
column 9, lines 38 - 63) transmitting the parsed event to the event correlation service 
(Expert System 326) utilizing data stored in the knowledge database (Network Topology 
Object Database 318) to derive an event from the parsed event (Expert System 326 
reads state changes from Network Topology Object Database 31 8.. .Expert System 326 
applies appropriate rules that correlate various events and infer possible root causes of 
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events to produce an assessment of the events... the assessment... is provided to 
Presentation Manager 216, Fig. 3) and transmitting the derived event to one of a 
plurality of operator workstations (Presentation Manager 216 provides the formatted 
data to Network Management Workstation 220, Fig. 3). As to transmitting the derived 
event regardless of a significance of the derived event, see the rejection to claim 16 
above. 

As to claim 33, this is a system claim that corresponds to method claim 18; note 
the rejection to claim 18 above, which also meet this system claim. 

As to claim 1 , Jacobs teaches (column 2, lines 36 - 46; column 5, lines 55 - 65; 
column 7, line 39 - column 8, line 2; column 9, lines 5-25 and 38 - 63; column 1 1 , 
lines 9 - 40) correlating network event messages on a computer network (correlating 
network events across many different network domains) comprising: 

at least one computer (computer system 1302, Fig. 13) comprising a processor 
(processor 1304, Fig. 13) and memory (main memory 1308, Fig. 13); 

a network management service (Network Management Workstation 220, Fig. 3), 
an event notification service (state management); and 

a message parsing service (network event parser 314, Fig. 3) adapted to receive 
a raw event from the event notification service, parse the raw event, and transmit the 
parsed event to the event notification service (events are collected from Network 202 
and input to a Network Event Parser 314... Network Event Parser 314 parses and 
formats the data, Fig. 3). As to an event correlation service see claim 18 above. As to 
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a network mediation service, see claim 28. As to transmitting the derived event 
regardless of a significance of the derived event, see the rejection to claim 16 above. 

As to claim 29, Jacobs as modified teaches (column 7, line 47 - column 8, line 2; 
column 9, lines 38 - 63 of Jacobs) transmitting the parsed event from the message 
parsing service to the event notification service (Network Event Parser 314 parses and 
formats the data to be uploaded to Network Topology Object Database 318, Fig. 3) and 
transmitting the parsed event from the event notification service to the network 
management service (Presentation Manager 216 receives data from Expert System 
326... Presentation Manager 216 provides the formatted data to Network Management 
Workstation 220, Fig. 3). 

As to claim 1 9, Jacobs as modified teaches (column 7, lines 47 - 63 of Jacobs) 
transmitting the raw event from the network mediation service to the event notification 
service and transmitting the raw event from the event notification service to the 
message parsing service (events include Network Alarms 306 and Network Outage 
Information 308... this information is collected from Network 202 and input to a Network 
Event Parser 314, Fig. 3). 

As to claim 22, Jacobs as modified teaches (column 7, line 39 - column 8, line 2; 
column 9, lines 38 - 63 of Jacobs) transmitting the parsed event from the message 
parsing service to the event notification service (Network Event Parser 314 parses and 
formats the data to be uploaded to Network Topology Object Database 318, Fig. 3), and 
transmitting the parsed event from the event notification service to the event correlation 
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service (Expert System 326 reads state changes from Network Topology Object 
Database 318, Fig. 3). 

As to claim 25, Jacobs as modified teaches (column 7, line 47 - column 8, line 2; 
column 9, lines 5-23 and 38 - 63 of Jacobs) transmitting the derived event from the 
event correlation service to the event notification service (Expert System 326 can also 
provide a recommendation on corrective action or network controls to Network Topology 
Object Database 31 8... the resulting state changes are then provided to Presentation 
Manager 216 to format for presentation, Fig. 3), transmitting the derived event from the 
* event notification service to the network management service, and transmitting the 
derived event from the network management service to one of a plurality of operator 
workstations (Presentation Manager 216 receives data from Expert System 326... these 
data represent updated states of Network 202, network events, network performance, 
correlation of events, inferred causes of events, impacts of events, and recommended 
actions... Presentation Manager 216 provides the formatted data to Network 
Management Workstation 220, Fig. 3). 

As to claim 2, Jacobs as modified teaches (column 4, lines 23 - 32; column 1 1 , 
lines 37 - 56 of Lawson) the network mediation service is adapted to interface with at 
least one external computer network (network connection 52 represents an example of 
the networking means for interconnect servers, Fig. 3). 

As to claims 3 and 4, Jacobs as modified teaches (column 7, lines 47 - 67 of 
Jacobs) receiving a raw event at the network mediation service from the external 
computer network (such events include Network Alarms 306 and Network Outage 
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Information 308... this information is collected from Network 202, Fig. 3), and 
transmitting the raw event to the message parsing service (events are collected from 
Network 202 and input to a Network Event Parser 314, Fig. 3); 

As to claim 5, Jacobs as modified teaches (column 2, lines 36 - 46; column 5, 
lines 55 - 65; column 7, line 39 - column 8, line 2; column 9, lines 38 - 63 of Jacobs) 
transmitting the parsed event to the network management service (Presentation 
Manager 216 receives data from Expert System 326... Presentation Manager 216 
provides the formatted data to Network Management Workstation 220, Fig. 3). 

As to claim 6, Jacobs as modified teaches (column 2, lines 36 - 46; column 5, 
lines 55 - 65; column 7, line 39 - column 8, line 2; column 9, lines 38 - 63 of Jacobs) 
the message parsing service is adapted to route the parsed event to the event 
correlation service (Expert System 326, Fig. 3) via the event notification service (Expert 
System 326 reads state changes from Network Topology Object Database 318, Fig. 3). 

As to claim 7, Jacobs as modified teaches (column 9, lines 38 - 62 of Jacobs) 
the network management service is adapted to interface with a plurality of operator 
workstations (Presentation Manager 216 provides the formatted data to Network 
Management Workstation 220, for viewing by network management personnel, Fig. 3). 
1 0. Claims 8-15, 20, 21 , 23, 24, 26, 27, 30 and 31 are rejected under 35 U.S.C. 
103(a) as being unpatentable over Jacobs and Lawson in view of U.S. Patent No. 
6,477,585 to Cohen. 

As to claims 9 and 30, Jacobs as modified teaches (column 7, line 47 - column 
8, line 2; column 9, lines 38 - 63 of Jacobs) processing the parsed event and 
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transmitting the processed event to the network management service (Presentation 
Manager 216 receives data from Expert System 326... Presentation Manager 216 
provides the formatted data to Network Management Workstation 220, Fig. 3). Jacobs 
as modified does not teach an event channel. 

However, Cohen teaches managing events in a distributed computing 
environment (column 2, lines 33 - 50) and event channels (column 5, lines 38 - 61 ; 
column 9, lines 39 - 62). 

It would have been obvious to apply the teaching of event channels as taught by 
Cohen to the invention of Jacobs as modified because event channels allow multiple 
suppliers to communicate with multiple consumers in an asynchronous way (column 1 , 
lines 48 - 50 of Cohen). 

As to claims 13 and 31 , Jacobs as modified teaches (column 7, line 47 - column 
8, line 2; column 9, lines 38 - 63; column 12, lines 8 - 32 of Jacobs) transmitting the 
processed event from the parsed event to the network management service 
(Presentation Manager 216 receives data from Expert System 326... Presentation 
Manager 21 6 provides the formatted data to Network Management Workstation 220, 
Fig. 3) and an event filter (state filter, step 410, Fig. 4). As to an event channel, see 
claim 30 above. 

As to claims 12 and 20, Jacobs as modified teaches (column 7, lines 47 - 63 of 
Jacobs) receiving the raw event and transmitting the raw event to the message parsing 
service (events include Network Alarms 306 and Network Outage Information 308... this 
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information is collected from Network 202 and input to a Network Event Parser 314, Fig. 
3). As to an event channel, see claim 30 above. 

As to claim 21, Jacobs as modified teaches (column 7, lines 47 - 63; column 12, 
lines 8-32 of Jacobs) an event filter (state filter, step 410, Fig. 4) and transmitting the 
raw event to the message parsing service (events include Network Alarms 306 and 
Network Outage Information 308... this information is collected from Network 202 and 
input to a Network Event Parser 314, Fig. 3). As to an event channel see claim 30 
above. 

As to claims 14 and 23, Jacobs as modified teaches (column 7, line 39 - column 
8, line 2; column 9, lines 38 - 63 of Jacobs) transmitting the processed to the event 
correlation service (Expert System 326 reads state changes from Network Topology 
Object Database 318, Fig. 3). As to an event channel see claim 30 above. 

As to claim 24, Jacobs as modified teaches (column 7, line 39 - column 8, line 2; 
column 9, lines 38 - 63; column 12, lines 8 - 32 of Jacobs) an event filter (state filter, 
step 410, Fig. 4) transmitting the processed to the event correlation service (Expert 
System 326 reads state changes from Network Topology Object Database 318, Fig. 3). 

As to claims 15 and 26, Jacobs as modified teaches (column 7, line 47 - column 
8, line 2; column 9, lines 5-23 and 38 - 63 of Jacobs) transmitting the processed event 
the network management service (Presentation Manager 216 receives data from Expert 
System 326... Presentation Manager 216 provides the formatted data to Network 
Management Workstation 220, Fig. 3). As to an event channel see claim 30 above. 



Application/Control Number: 09/577,071 Page 14 

Art Unit: 2126 

As to claim 27, Jacobs as modified teaches (column 7, line 47 - column 8, line 2; 
column 9, lines 5-23 and 38 - 63; column 12, lines 8 - 32 of Jacobs) an event filter 
(state filter, step 410, Fig. 4), and transmitting the processed event the network 
management service (Presentation Manager 216 receives data from Expert System 
326... Presentation Manager 216 provides the formatted data to Network Management 
Workstation 220, Fig. 3). 

As to claim 10, Jacobs as modified teaches (column 12, lines 8 - 32 of Jacobs) 
event notification service is further comprised of at least one filter (state filter, step 410, 
Fig. 4). 

As to claim 1 1 , Jacobs as modified teaches (column 1 1 , lines 23 - 36 of Cohen) 
at least one filter is coupled to at least one of the plurality of event channels (first stage 
filter for SVC events are the SVC routing destination SVC messages that are routed to 
EMS will be sent through the EMS event channel). 

As to claim 8, Jacobs as modified does not specify transmitting data request from 
operator workstation. 

However, Cohen teaches (column 7, lines 42 - 52) receive data requests from 
the plurality of operator workstations and transmit the data requests to the event 
correlation service via the event notification service (event consumer may use the 
Consumer API to define a new event filter and add it to an event filter group). 

It would have been obvious to apply transmitting data request from operator 
workstation as taught by Cohen to the invention of Jacobs as modified because this 
allows the plurality of operator workstations to subscribe to new events. 
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Response to Arguments 



1 1 . Applicants arguments filed May 15, 2003 have been fully considered but they 
are not persuasive. 

The applicant's representative argues that Jacobs does not teach transmitting "a 
derived event to one of a plurality of operator workstations, regardless of a significance 
of the derived event" (p. 8, lines 12-24; p. 10, lines 6- 12; p. 11, lines 1 -8). The 
examiner respectfully disagrees because Jacobs teaches transmitting a derived event 
to one of a plurality of operator workstations, regardless of a significance of the derived 
event (changes in states of all related network elements are correlated and reported to 
the user via a table of correlations; column 9, lines 30 - 38). The applicant's 
representative cited a passage from Jacobs (column 12, lines 22 - 27 of Jacobs) and 
made the following submission base on the passage: "In other word, if a state change 
(derived event) is determined to be insignificant, it is not reported" (p. 9, lines 1 - 2). 
The examiner respectfully disagrees because the passage from Jacobs (column 12, 
lines 22 - 27) describes a filtering process and the 'state change' of Jacobs in not a 
derived event. The examiner interprets the derived event as the final representation of 
the event when all event processing, such as parsing and filtering, are completed; 
however, the 'state change' of Jacobs is an event that is processed by the state filter. 
Therefore, the 'state change' of Jacobs is not a derived event because it is not the final 
representation of the event. The derived event would read on "data represent updated 
states of Network 202, network events, network performance, correlation of events" 
(column 9, lines 38 - 62 of Jacobs) and Jacobs does not specify discarding any of the 
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derived events. The examiner would also like to note that discarding events that does 
not satisfy conditions defined by a filter is known in the art (see Background of this 
application, p. 5, line 21 - p. 6, line 3). The specification of this application also 
discloses using filters to discard events ("each of the nodes or services in this chain 
may cache the event, ignore (filter) it," p. 24, lines 12-13; "status information which 
may be logged or ignored," p. 28, line 5). 



12. Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 

§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

1 3. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Li B. Zhen whose telephone number is (703) 305-3406. 
The examiner can normally be reached on Mon - Fri, 8am - 4:30pm. 



Conclusion 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, John A. Follansbee can be reached on (703) 305-8498. The fax phone 
numbers for the organization where this application or proceeding is assigned are (703) 
746-7239 for regular communications and (703) 746-7238 for After Final 
communications. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is (703) 305- 
3900. 



Li B. Zhen 
Examiner 
Art Unit 2126 



Ibz 

July 16, 2003 



